PT-2025-25859 · Grafana+2 · Grafana+2

Jinay Patel + 1 · Publicado 2025-06-17 · Atualizado 2025-08-04 · CVE-2025-1088

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.2

Description The issue is caused by an excessively long dashboard title or panel name, leading to Improper Input Validation vulnerability in Grafana, which affects Chromium browsers and causes them to become unresponsive.

Recommendations For versions prior to 11.6.2, update to version 11.6.2 or higher to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2025-07441

BIT-GRAFANA-2025-1088

CVE-2025-1088

ECHO-EE2A-D273-FA3A

GHSA-CRVV-6W6H-CV34

GO-2025-3766

OPENSUSE-SU-2025:15226-1

OPENSUSE-SU-2025:15405-1

Produtos afetados

Chromium

Grafana

Red Os

Referências · 74

• https://github.com/grafana/grafana · Nota
• https://suse.com/security/cve/CVE-2025-6023 · Nota
• https://suse.com/security/cve/CVE-2025-52903 · Nota
• https://bdu.fstec.ru/vul/2025-07441 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-4656 · Nota
• https://suse.com/security/cve/CVE-2025-54379 · Nota
• https://suse.com/security/cve/CVE-2025-53547 · Nota
• https://suse.com/security/cve/CVE-2025-4674 · Nota
• https://suse.com/security/cve/CVE-2025-53632 · Nota
• https://suse.com/security/cve/CVE-2025-53633 · Nota
• https://t.me/cvenotify/126049 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-crvv-6w6h-cv34 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-6226 · Nota
• https://suse.com/security/cve/CVE-2025-46702 · Nota
• https://grafana.com/security/security-advisories/cve-2025-1088 · Nota